Used to do authorization checks in k8s.

By default, every namespace gets a default service account.It allows default discovery permissions. You assign a service account to a pod.